jantimon/favicons-webpack-plugin

Incompatible with webpack-subresource-integrity

Open

#279 建立於 2021年7月29日

在 GitHub 查看
 (3 留言) (0 反應) (0 負責人)JavaScript (1,198 star) (226 fork)batch import
help wantedwontfix

描述

Current behaviour 💣

When using favicons-webpack-plugin in webpack@^5.0.0, webpack-subresource-integrity throws an error.

Expected behaviour ☀️

favicons-webpack-plugin should complete even while using webpack-subresource-integrity; preferably with included integrity hashes.

Reproduction Example 👾

Setup latest webpack with favicons-webpack-plugin and webpack-subresource-integrity.

Environment 🖥

Node.js v16.5.0 linux 5.13.5-arch1-1

貢獻者指南

技術棧
javascriptnodejs
領域
build systemtooling
議題類型
bug
難度面向新貢獻者的預計實作難度，1 表示很小改動，5 表示專家級工作。
3
預計時間有經驗貢獻者完成調查、實作、測試並準備 pull request 的粗略時間範圍。
half day
活動狀態議題目前的可參與程度：新鮮、活躍、陳舊、阻塞或等待維護者輸入。
stale
清晰度議題是否清楚說明預期改動、驗收標準和下一步。
needs investigation
前置要求
Understanding of webpack plugin systemFamiliarity with html webpack pluginKnowledge of subresource integrity
新手友善度1-100 的估計分數，表示該議題對首次貢獻者的友善程度。
30
研究方向
Investigate the conflict between favicons webpack plugin and webpack subresource integrity (SRI). The issue likely stems from how favicons webpack plugin modifies HTML assets via html webpack plugin, which may interfere with SRI hash injection. Start by reviewing the source code of favicons webpack plugin (especially how it integrates with html webpack plugin) and the SRI plugin's documentation/issue tracker. Look for any known incompatibilities or hooks that might be missing. Consider reproducing the issue with a minimal webpack config to pinpoint the exact error. The maintainers may need to adjust asset handling to ensure SRI hashes are computed correctly.